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(57)Abstract: 

PROBLEM TO BE SOLVED: To securely move a plurality of pieces of value 
information between portable terminals. 

SOLUTION: A server for moving the value securely moves a plurality of pieces of 
value information in an IC chip onto another IC chip while preventing the copying and 
falsifying of the value information without showing the value information itselfa key 
necessary for accessing the value information and its logic to devices excluding that 
having the authority by controlling a tamper- proof hardware module SAM in which 
the value information itselfthe key necessary for accessing the value information and 
its logic are sealed. For examplewhen the portable terminal is exchanged to a new 
modelall pieces of value information can be securely moved only by connecting the 
terminal to one part. 



CLAIMS 



[Claim(s)] 

[Claim 1]A data transfer system characterized by comprising the following for moving 
value information. 

A key for accessing the value information itself and value information used as a 

moved objectand a value information service device which holds the logic safely. 

A value information move service device which relays upload to said value information 



service device of value information stored in an information recording medium of a 
moved materialand download of value information from said value information service 
device to an information recording medium of a movement destination. 

[Claim 2]After said value information move service device's changing a key for 
accessing value information on an information recording medium of a moved material 
into **** from this key at the time of normal usewhile uploading value information to 
said value information service deviceThe data transfer system according to claim 1 
characterized by what is changed into this key from **** after downloading value 
information from said value information service device on an information recording 
medium to a movement destination. 

[Claim 3]When there are two or more keys for two or more value information being 
held on an information recording medium of a moved materialand accessing each 
value information itself and value information and value information service devices 
which hold the logic safelyThe data transfer system according to claim 1 
characterized by what said value information move service device performs upload of 
value information from an information recording medium of a moved materialand 
download to an information recording medium of a movement destination for for every 
value information service device. 

[Claim 4]The data transfer system according to claim 1 characterized by what 
initialization processing of an information recording medium of a movement 
destination is performed for before said value information move service device 
downloads value information from a value information service device. 
[Claim 5]The data transfer system according to claim 1 characterized by what said 
value information move service device does for the authenticating processing of an 
information recording medium of a moved materialand/or the information recording 
medium of a movement destination. 

[Claim 6]A data transfer method characterized by comprising the following for moving 
value information. 

A step which relays upload of a key for accessing the value information itself and 
value informationand value information to a value information service device which 
holds the logic safely from an information recording medium of a moved material. 
A step which stores temporarily value information which a value information service 
device is movingand a step which relays download of value information from said value 
information service device to an information recording medium of a movement 
destination. 

[Claim 7]A step which changes a key for accessing value information on an 
information recording medium of a moved material into **** from this key at the time 
of normal use before relaying upload to a value information service deviceThe data 
transfer method according to claim 6 having further a step changed into this key from 



**** after downloading value information from a value information service device on 
an information recording medium to a movement destination. 

[Claim 8]When there are two or more keys for two or more value information being 
held on an information recording medium of a moved materialand accessing each 
value information itself and value information and value information service devices 
which hold the logic safelyThe data transfer method according to claim 6 
characterized by what a step which relays a step which relays said uploadand/or said 
download is performed for for every value information service device. 
[Claim 9]The data transfer method according to claim 6 characterized by what it has 
further for a step which performs initialization processing of an information recording 
medium of a movement destination before downloading value information from a value 
information service device. 

[Claim 10]The data transfer method according to claim 6 characterized by what it has 
further for a step which carries out authenticating processing of an information 
recording medium of a moved materialand/or the information recording medium of a 
movement destination. 

[Claim 1 1]A value information move service device which serves movement of value 
information between information recording mediacomprising: 

A means to relay upload of a key for accessing the value information itself and value 
informationand value information to a value information service device which holds 
the logic safely from an information recording medium of a moved material. 
A means to relay download of value information from said value information service 
device to an information recording medium of a movement destination. 

[Claim 12]A means to change a key for accessing value information on an information 
recording medium of a moved material into **** from this key at the time of normal 
use before relaying upload to a value information service deviceThe value information 
move service device according to claim 1 1 having further a means to change into this 
key from **** after downloading value information from a value information service 
device on an information recording medium to a movement destination. 
[Claim 13]When there are two or more keys for two or more value information being 
held on an information recording medium of a moved materialand accessing each 
value information itself and value information and value information service devices 
which hold the logic safelyThe value information move service device according to 
claim 1 1 characterized by what a means to relay a means to relay said uploadand/or 
said download relays for every value information service device. 
[Claim 14]The value information move service device according to claim 1 1 
characterized by what it has further a means to perform initialization processing of an 
information recording medium of a movement destination for. 
[Claim 15]The value information move service device according to claim 11 
characterized by what it has further for a means which carries out authenticating 



processing of an information recording medium of a moved materialand/or the 
information recording medium of a movement destination. 

[Claim 16]A value information move service method which serves movement of value 
information between information recording mediacomprising: 

A step which relays upload of a key for accessing the value information itself and 
value informationand value information to a value information service device which 
holds the logic safely from an information recording medium of a moved material. 
A step which relays download of value information from said value information service 
device to an information recording medium of a movement destination. 

[Claim 17]A step which changes a key for accessing value information on an 
information recording medium of a moved material into **** from this key at the time 
of normal use before relaying upload to a value information service deviceThe value 
information move service method according to claim 16 having further a step changed 
into this key from **** after downloading value information from a value information 
service device on an information recording medium to a movement destination. 
[Claim 18]When there are two or more keys for two or more value information being 
held on an information recording medium of a moved materialand accessing each 
value information itself and value information and value information service devices 
which hold the logic safelyThe value information move service method according to 
claim 16 characterized by what a step which relays a step which relays said 
uploadand/or said download is performed for for every value information service 
device. 

[Claim 19]The value information move service method according to claim 16 
characterized by what it has further for a step which performs initialization processing 
of an information recording medium of a movement destination before downloading 
value information from a value information service device. 
[Claim 20]The value information move service method according to claim 16 
characterized by what it has further for a step which carries out authenticating 
processing of an information recording medium of a moved materialand/ or the 
information recording medium of a movement destination. 

[Claim 21] A storage which stored physically computer software described to perform 
value information move service which serves movement of value information between 
information recording media on computer systems in computer-readable 
formcomprising: 

A step which relays upload of a key for said computer software to access an 
information recording medium to the value information itself and value information of a 
moved materialand value information to a value information service device which 
holds the logic safely. 

A step which relays download of value information from said value information service 
device to an information recording medium of a movement destination. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention relates to the non-contact (or contact type) IC 
card or IC chip to a memory which can be written according to non-contact while 
being provided with the memory function holding dataWhile having a wireless interface 
for wireless data to perform access to a memory function from external reader/writer 
especiallylt is related with information processing terminalssuch as a noncontact IC 
card or an IC chip provided with the cable interface for connecting with an external 
instrument and a portable telephone used by carrying this kind of an IC card or an IC 
chip via a cable interfaceand PDA. 

[0002]The noncontact IC card or IC chip in which this invention stored electronically 
the value information of electronic moneyan electronic ticketand others in detailAnd 
the information processing terminal used by carrying this kind of an IC card or an IC 
chip via a cable interface is startedand it is especially related with secure movement 
of the value information between information processing terminals. 
[0003] 

[Description of the Prior Art]From the formervarious devices which used the 
password and the password for personal identification or authenticating processing 
are devisedand practical use is presented. For examplein a bank or other financial 
institutionswhen using an atm card and a credit card, the banking terminal top of a cash 
dispenser or others — the person himself/herself — the input of a password or a 
password is demanded from a user as a means of attestationand after checking that 
the right password and the password have been entered from the usercash-receipt- 
and-disbursement operation is performed. 

[0004]In storagessuch as a magnetic stripe currently allocated on one ATMcardonly the 
usable storage area is provided only to the bank. Thereforesince the input of a 
password or a password which was mentioned above is only access to this single 
storage areait is hard to say that the protection to forgery or surreptitious use is 
enough. 

[0005] For this reasonthe contact type IC card which had an electric point of contact 
in an ATM carda credit cardetc.and the noncontact IC card which write data by non- 
contact via wireless data are often increasingly used from viewpoints of forgery 
prevention etc. For examplethe ic card reader/writer installed in the entrance in a cash 
dispenser or the concert hallthe wicket of a stationetc. can access the IC card which the 
user held up by non-contact. 

[0006]Personal identification or authenticating processing is performed between an IC 



cardand an ic card reader /writer by a user inputting a password into the ic card reader si deand 
comparing the inputted password with the password stored on the IC card. And when 
it succeeds in personal identification or authenticating processinguse of the 
application saved in the IC card is attainedfor example. Hereas application which an IC 
card holdsthe value information of electronic moneyan electronic ticketetc. can be 
mentionedfor example. It is also possible by storing an advance payment system 
certificate electronically to use the personal digital assistant connected to an IC card 
or this as a prepaid card. (The password used at the time of IC card access is called 
especially PIN (Personalldentification Number).) 

[0007]These daysan IC card with conjointly comparatively mass memory space 
appearsand improvement in minuteness making art is spreading. Since a single storage 
areai.e. single applicationis supported in the conventional ATMcardetc.it is necessary to 
walk around with two or more cards which responded for every use or purpose. On 
the other handsince two or more applications are simultaneously storable according 
to such an IC card with a bulk memorythe IC card of one sheet can be used for two 
or more uses. For exampletwo or more applicationssuch as electronic money for 
performing electronic bankingan electronic ticket for entering the specific concert 
halland a digitized advance payment system certificateare stored on the IC card of 
one sheetand the IC card of one sheet can be made to apply to various uses. 
[0008]By having a cable interface for an IC card to connect with an external 
instrument other than the non-contact (or contact type) interface to the 
reader/writer for cards (card reading-and~writing device)It can connect with a 
portable telephone and PDA (Personal Digital Assistant)or an IC card can be built in 
and used (howeverin the case of many which are built in a terminalan IC card is one~ 
chip-ized and is constituted). 

[0009]In such a casevarious application services using an IC card can be performed 
on an information processing terminal. For examplethe user interaction to an IC card 
can be performed on an information processing terminal using user interfacessuch as 
a keyboard on an information processing terminaland a display. By connecting the IC 
card with the portable telephonea telephone network is passed and the contents 
memorized on the IC card can also be carried out. 

[0010]Of coursewhen value informationsuch as electronic moneyan electronic 
ticketan advance payment system certificateis stored on an IC cardthe information 
processing terminal can realize processing of value informationsuch as electronic 
banking and settlement of a prepaid card formand other various services. The 
processing according to the phase of the data transfer between an IC card and a card 
reading-and-writing device and the processing according to the internal state of the 
IC card can be provided. 

[001 1]By the waywhen the IC chip which stored value information is built in a portable 
telephoneit is necessary to move value information between IC chips (i.e.between 
personal digital assistants) for the reasons of a model change etc. 



[0012]Generally model change procedure of a portable telephone is performed at the 
store of a telecommunications companyetc.and the personal information on the 
address book within an old machine kindetc. is moved to a new model. Howeverwhen 
moving the value information in an IC chipthe illegal duplicate and alteration of 
disappearance of value information and value information by communication failurea 
machine obstacleetc. in the middle of a move may be performedand responsibility is 
excessive for a telecommunications company. 

[0013]First of allsince a telecommunications company has neither a key required in 
order to access the value information instead of one with the service provider of 
electronic money or an electronic ticketnor its logicprocessing value information has 
much inconvenience. In a telecommunications companythe responsibility about value 
information and its key occurs inevitably by contracting movement of value 
information. For the service provider of electronic money or an electronic ticketit is 
not preferred to pass the access key used as the basis of trust of service and its 
logic outsidealthough it is a telecommunications company. 

[0014]The service provider of value information has usually shut up the key for 
accessing the value information itself and value informationand its logic using 
hardware module SAM (Secure Application Module) with the Tampa-proof nature, in 
order to move two or more value information by one servers for movementsuch as a 
telecommunications companybe temporaryalthough it is necessary to save value 
informationUnless a thing like SAM is usedeven if it enciphers uniquely by this server 
for movementa possibility of decoding value information and its key on a server 
becomes high. 

[0015]On the other handapart from the model change procedure of the main part of a 
personal digital assistantthe method of moving the value information in an IC chip by 
the service provider of the value information is also considered. Probablythis method 
will be effective from a viewpoint of responsibility separation. 

[0016]Howeverthe user has to take two or more procedure in connection with the 
model change of a personal digital assistant. When the value information of various 
sorts is especially stored in one IC chip with increase of the memory space of an IC 
card or an IC chipthe move procedure of value information must be taken to each 
service providerand it is very troublesome. Although the reader/writer which reads 
value information from an IC chip needs to switch a session to two or more service 
providersit requires time and effort for performing this switching operation manually. 
Since the structure of communication by the side of an IC chip also becomes 
complicateda possibility that an obstacle will occur becomes high. 
[0017] 

[Problem(s) to be Solved by the Invention]The purpose of this invention is to provide 
the outstanding data transfer system and data transfer method and value information 
move service device which can be made to move the value information of electronic 
moneyan electronic ticketetc. to secure onea value information move service 



methodand a storage. 

[0018]. The further purpose of this invention can move the value information of the 
electronic money currently held in the IC card or the IC chipan electronic ticketetc. 
to secure one. It is in providing the outstanding data transfer system and a data 
transfer methoda value information move service devicea value information move 
service methodand a storage. 

[0019]The further purpose of this invention two or more value information currently 
held in the IC card or the IC chiplt is in providing the outstanding data transfer 
system and data transfer method and value information move service device which 
can be moved to secure one only by connecting with one servera value information 
move service methodand a storage. 
[0020] 

[Means for Solving the Problem and its Function]This invention is made in 
consideration of an aforementioned problemand the 1st sideA key for accessing the 
value information itself and value information which are the data transfer systems for 
moving value informationand serve as a moved objectand a value information service 
device which holds the logic safelyA value information move service device which 
relays upload to said value information service device of value information stored in 
an information recording medium of a moved materialand download of value 
information from said value information service device to an information recording 
medium of a movement destinationlt is a providing data transfer system. 
[0021]Howevera "system" said here means a thing in which two or more devices (or 
functional module which realizes a specific function) gathered logicallyand it is not 
especially asked whether each device and a functional module are in a single case. 
[0022]The 2nd side of this invention is a data transfer method for moving value 
informationA step which relays upload of a key for accessing the value information 
itself and value informationand value information to a value information service device 
which holds the logic safely from an information recording medium of a moved 
materiallt is a data transfer method possessing a step which stores temporarily value 
information which a value information service device is movingand a step which relays 
download of value information from said value information service device to an 
information recording medium of a movement destination. 

[0023]According to a data transfer system or a data transfer method concerning the 
1st or 2nd side of this invention. . Shut up a key required in order to access value 
information currently held at information recording mediasuch as an IC chipat value 
information of the value information itselfand its logic. Value information service 
devicessuch as hardware module SAM with the Tampa-proof natureare controlledlt 
can move secure one on other information recording mediapreventing a duplicate and 
an alteration of value informationwithout showing the logic as a key required in order 
to access the value information itself and value information in addition to a device 
with authority. For examplewhen exchanging a personal digital assistant for a new 



modelall the value information currently held in a terminal only by connecting with one 
place can be moved to secure one. Thereforethe responsibility range of a move 
entrepreneur of value information and each service provider who employs value 
information service is clearly separable. 

[0024]Said value information move service device may be made to upload value 
information to said value information service device hereafter changing a key for 
accessing value information on an information recording medium of a moved material 
into **** from this key at the time of normal use. In such a casevalue information can 
prevent a duplicate and being altered and used unjustly in the middle of movement. 
Even if it is a case where movement of value information goes wrongby returning a 
key of a moved material to this keyit can use as backup and disappearance of value 
information can be prevented. 

[0025]After said value information move service device downloads value information 
from said value information service device on an information recording medium to a 
movement destinationit may be made to change it into this key from ****. In such a 
casesince it becomes impossible with as about normal use by considering value 
information left behind to an information recording medium of a moved material as as 
[ **** ]an unauthorized use can be prevented. 

[0026]When there are two or more keys for two or more value information being held 
on an information recording medium of a moved materialand accessing each value 
information itself and value information and value information service devices which 
hold the logic safelySaid value information move service device may be made to 
perform upload of value information from an information recording medium of a moved 
materialand download to an information recording medium of a movement destination 
for every value information service device. In such a casewhat is necessary is just to 
connect with one value information move service deviceand it is not necessary to 
switch communication one by one for every value information service hand control or 
automatically. For this reasontime and effort can decrease and a possibility that 
communication failure will be encountered can be decreased. If it thinks from the 
information-recording-medium side of a moved materialhe does not need to be 
conscious of each value information service device used as a relay destinationand 
procedure will be simplified. 

[0027]Said value information move service device may be made to perform 
initialization processing of an information recording medium of a movement 
destinationbefore downloading value information from a value information service 
device. 

[0028]Said value information move service device may be made to carry out 
authenticating processing of an information recording medium of a moved 
materialand/or the information recording medium of a movement destination. 
[0029]The 3rd side of this invention is a value information move service device or a 
value information move service method which serves movement of value information 



between information recording mediaA means or a step which relays upload of a key 
for accessing the value information itself and value informationand value information 
to a value information service device which holds the logic safely from an information 
recording medium of a moved materiallt is a value information move service device or 
a value information move service method possessing a means or a step which relays 
download of value information from said value information service device to an 
information recording medium of a movement destination. 

[0030]According to a value information move service device or a value information 
move service method concerning the 3rd side of this invention. . Shut up a key 
required in order to access value information currently held at information recording 
mediasuch as an IC chipat value information of the value information itselfand its logic. 
Value information service devicessuch as hardware module SAM with the Tampa- 
proof natureare controlledlt can move secure one on other information recording 
mediapreventing a duplicate and an alteration of value informationwithout showing the 
logic as a key required in order to access the value information itself and value 
information in addition to a device with authority. For examplewhen exchanging a 
personal digital assistant for a new modelall the value information currently held in a 
terminal only by connecting with one place can be moved to secure one. Thereforethe 
entrepreneur who performs a model change of a personal digital assistant can move 
value informationseparating clearly the responsibility range of each service provider 
who employs value information service. 

[0031 ]A value information move service device concerning the 3rd side of this 
invention may be made to upload value information to said value information service 
device hereafter changing a key for accessing value information on an information 
recording medium of a moved material into **** from this key at the time of normal 
use. In such a casevalue information can prevent a duplicate and being altered and 
used unjustly in the middle of movement. Even if it is a case where movement of 
value information goes wrongby returning a key of a moved material to this keyit can 
use as backup and disappearance of value information can be prevented. 
[0032]After downloading value information from said value information service device 
on an information recording medium to a movement destinationit may be made to 
change into this key from ****. In such a casesince it becomes impossible with as 
about normal use by considering value information left behind to an information 
recording medium of a moved material as as [ **** ]an unauthorized use can be 
prevented. 

[0033]When there are two or more keys for two or more value information being held 
on an information recording medium of a moved materialand accessing each value 
information itself and value information and value information service devices which 
hold the logic safelylt may be made to perform upload of value information from an 
information recording medium of a moved materialand download to an information 
recording medium of a movement destination for every value information service 



device. In such a casewhat is necessary is just to connect with one value information 
move service deviceand it is not necessary to switch communication one by one for 
every value information service hand control or automatically. For this reasontime and 
effort can decrease and a possibility that communication failure will be encountered 
can be decreased. If it thinks from the information-recording-medium side of a moved 
materialhe does not need to be conscious of each value information service device 
used as a relay destinationand procedure will be simplified. 

[0034]A value information move service device or a value information move service 
method concerning the 3rd side of this invention may be made to perform initialization 
processing of an information recording medium of a movement destinationbefore 
downloading value information from a value information service device. 
[0035]A value information move service device or a value information move service 
method concerning the 3rd side of this invention may be made to carry out 
authenticating processing of an information recording medium of a moved 
materialand/or the information recording medium of a movement destination. 
[0036]The 4th side of this invention is the storage which stored physically computer 
software described to perform value information move service which serves 
movement of value information between information recording media on computer 
systems in computer-readable formA step which relays upload of a key for said 
computer software to access an information recording medium to the value 
information itself and value information of a moved materialand value information to a 
value information service device which holds the logic safelylt is a storage possessing 
a step which relays download of value information from said value information service 
device to an information recording medium of a movement destination. 
[0037]A storage concerning the 4th side of this invention is a medium which provides 
computer software in a computer-readable form to a general purpose computer 
system which can execute various program codesfor example. Attachment and detachment 
of DVD (Digital Versatile Disc)CD (Compact Disc)FD (Floppy Disk)MO (Magneto- 
Optical disc)etc. are free for such a mediumand it is a storage of portabilityfor 
example. Or it is also technically possible to provide specific computer systems with 
computer software via transmission mediasuch as a network (a network does not ask 
distinction of radio and a cable)etc. 

[0038]A storage concerning the 4th side of this invention defines a collaboration 
relation on structure of computer software and a storage for realizing a function of 
predetermined computer softwareor a function on computer systems. By installing 
predetermined computer software in computer systems via a storage concerning the 
4th side of this inventionif it puts in another wayOn computer systemsa collaboration 
operation is demonstrated and the same operation effect as a value information move 
service device or a value information move service method concerning the 3rd side of 
this invention can be obtained. 

[0039]The purposethe featureand an advantage of further others of this invention will 



become clear [ rather than ] by detailed explanation based on an embodiment and a 

drawing to attach of this invention mentioned later. 

[0040] 

[Embodiment of the Invention]Hereafterit explains in detail about the embodiment of 
this inventionreferring to drawings. 

[0041]This invention moves to secure one two or more value information currently 
held in the IC card or the IC chip only by connecting with one server. Belowthe thing 
of the server which moves value information is made to call it a "value move server." 
For examplewhen moving the value information on the IC chip built in on the occasion 
of the model change of a portable telephonethe telecommunications company etc. 
which offer model change service should just manage a value move server. With the 
provider of each value information servicealthough not necessarily unifiedsince the 
value move server can move value information to secure one according to this 
inventionseparation of responsibility becomes clear and it does not become excessive 
[ the responsibility of the entrepreneur who manages a value move server ]. 
[0042]The composition of the network system which realizes secure movement of 
value information is typically shown in drawing 1 . 

[0043]As shown in the figureon networkssuch as VPN (Virtual Private Network) or a 
dedicated lineThe application server (APS) 10A which the provider who offers value 
information service of electronic moneyan electronic ticketetc. installslOB — and the 
value move server 20 for moving the value information built in the IC card or the IC 
chip to secure one between IC chips exist. 

[0044]Each application server (APS) 10A10B — and the server 20 for value movement 
are provided with hardware module SAM (Secure Application Module) which has the 
Tampa-proof naturerespectively. SAM has shut up the key for accessing the value 
information itself and value informationand its logic. 

[0045]According to this embodimentthe server 20 for value movement is provided 
with administrative SAM21 in order to manage the information in each IC chip to 
secure one. Administrative SAM21 manages each IC chip holding value 
informationsuch as initialization processing of an IC chip. When administrative SAM21 
moves the value information in an IC chipit is provided with the logic for changing into 
temporary "****" which uses it from "this key" at the time of normal use only at the 
time of movement. 

[0046]Each application server 10A — is provided with SAM 12 for movement which 
operates at the time of movement by **** which operates with this key used when 
carrying out normal use of the value informationand which SAM11 and administrative 
SAM21 of the server 20 for value movement usually publish. 

[0047]UsuallySAM1 1 is individually managed on each service provider application 
server 10and serves value information. Usuallyeach service provider who gets to know 
the key with which SAM 11 accesses value informationand its logic cannot usually 
know the inside of SAM 1 1 unless each others have authority. The server 20 for value 



movement cannot usually know the contents of SAM1 1 either. 
[0048]UsuallyphysicallySAM1 1 and SAM12 for movement may be the hardware 
modules which became independent separatelyeven if unified within the same 
hardware module. The service provider may arrange SAM by a contract etc. at 
somewhere elsesuch as not the application server that self manages but the server 
20 for value movement. 

[0049]Although it is also possible to constitute as a server apparatus by hardware for 
exclusive useeach application server 10 and the server 20 for value movementlt is 
realizable also with the gestalt of starting predetermined server application on the 
common computer system called a workstation (WS) and a personal computer (PC). 
An example of a computer system is the PC / AT compatible machine or its 
succeeding machine of U.S. IBM. 

[0050]The IC card is built in and used for the personal digital assistants 30Asuch as a 
portable telephone and PDA (Personal Digital Assistant)as an IC chipor non-contact 
(or contact) access is carried outand it is used for the personal digital assistant 30B 
with reader/writer. In moving value information between an IC chip or an IC card for 
exchange of the model change of a personal digital assistantor the IC card itselfit 
connects with VPN via the communication media of radio or a cableand the personal 
digital assistant 30 requests movement of value information from the value move 
server 20. According to this embodimenteven if you are a case where two or more 
value information held at the IC chip is movedthe personal digital assistant 30 should 
care about enough the point that what is necessary is just to connect with the one 
value move server 20. 

[0051]When moving value informationthe server 20 for value movement uses 
administrative SAM21and controls an IC chip via a channel. 

[0052]According to this embodimentthe server 20 for value movement bears the role 
which relays itwhen encryption communication is performed between SAM 12 for 
movement of each service providerand an IC chip using administrative SAM21 for 
movement of value information. The personal digital assistant 30B and the IC chip 
built-in personal digital assistant 30A with the reader/writer function by the side of 
an IC chip bear the role which makes connection between an IC chip and the value 
move server 20when encryption communication is performed between SAM and an IC 
chip. 

[0053]Between the server 20 for value movementand each SAM12 for 
movementsetting out is individually made possiblerespectively about the authority to 
control SAM 12 for movement with the server 20 for value movement. Encryption by 
PKI (Public Key Infrastructure: public key infrastructure) or a common key is possible 
for between the server 20 for value movementand each SAM12 for movement. 
Between the server 20 for value movementand remote SAM 12 for movementit is 
connected by VPN or a dedicated line. 

[0054]In the network system shown in drawing 1 in order to move the value 



information in the IC chip built in the IC card or the personal digital assistantthe 
connection destination of the IC chip used as a moved material and a movement 
destination serves as the single server 20 for value movement. 

[0055]Administrative SAM21 of the server 20 for value movement changes the key of 
value information into temporary "****" for movement from "this key" at the time of 
normal usebefore moving value information. Before no movement of the value 
information currently held in the IC chip is completedposition information on the 
original IC chip is not deleted yetbut it holds as an object for backup. 
[0056]When movement is completedthe normal use of value information of 
administrative SAM21 becomes possible by returning **** to this key in the IC chip 
of a movement destination. Since it becomes impossible with as about normal use by 
considering it as as [ **** ] about the IC chip side of the move origin which it left to 
backupan unauthorized use can be prevented. 

[0057]The server 20 for value movement moves using SAM12 for movement of the 
service provider who corresponds each value information in an IC chip. Under the 
present circumstancesin SAM12 for movement by the side of a service provider 
(APS)the access restriction from the server 20 for value movement is set up a priori. 
[0058]In a service provider's application server 10 sidewhile usually storing the key 
and logic for accessing value information at the time of normal use in SAM1 1the key 
for value information movement and its logic are stored in SAM12 for movement. The 
value information in an IC chip is temporarily saved in SAM12 for movement of the 
application server 10 at the time of movement. 

[0059]At the IC chip side used as the movement destination of value informationafter 
performing pretreatment predetermined [such as formatting of the memory area]by 
the server 20 course for value movement. The movement is completed by 
downloading value information from SAM12 for movement of the service provider 
10i.e.an application server. 

[0060]After movement makes it impossible to move value information with the same 
key for movement henceforthwhen administrative SAM21 changes into a right key. It 
becomes impossible as a resultto use the value information for backup which remains 
on the IC chip of a moved material. 

[0061]And completion of movement of all the value information in an IC chip will 
delete the value information temporarily saved in SAM12 for movement of a service 
provider. 

[0062]In the form of the flow chart shows the procedure for moving value information 
to secure one between IC chips to drawing 2 on the network system concerning this 
embodiment. This procedure is realized by the collaboration operation between the IC 
chip by which network connection is carried out via a personal digital assistantthe 
server 20 for value movementand SAM12 for movement of each applicable application 
server (provider) 10. Hereafterthe secure moving processing of value information is 
explainedreferring to this flow chart. 



[0063]Firstthe IC chip which becomes the move origin of value information is 
connected with the communication apparatus (for examplea portable telephone with 
reader/writer or a portable telephone with a built-in IC chip) 30 with a reader/writer 
function. The IC chip of a moved material is connected with the server 20 for value 
movement by this communication apparatus 30 courseand it attests with the server 
20 for value movement with the user ID and the password which are sent from the 
communication apparatus 30 (Step S1). 

[0064]The server 20 for value movement searches the inside of the moved material 
IC chip of value informationand it saves those information in the movement 
information database (not shown) of server 20 local while it detects the kind of all the 
value information registered into the IC chip. Or the serial number and the registered 
reference table of the kind of value information of the IC chip which the server 20 
side for value movement prepared a priori are prepared in the movement information 
database a prioriBy obtaining the serial number of the moved material IC chip of value 
informationthe kind of value information registered into the IC chip is traced using this 
reference table (Step S2). The application servers which preparecorresponding 
service provideri.e.SAMshall differ for every kind of value information. 
[0065]Subsequentlyadministrative SAM21 of the server 20 for value movement 
changes a key required in order to access the value information in the moved material 
IC chip of value information itself into "****" temporarily used from "this key" at the 
time of normal use at the time of movement (Step S3). As a resulton a moved 
material IC chipit will be in the state which cannot use the usual value information 
during movement of value information. That isaccess to the value information in an IC 
chip is attained by switching to **** by SAM12 for movement instead of [ it becomes 
impossible for usual SAM1 1 of an applicable service provider to access the value 
information in an IC chip ]. 

[0066]Subsequentlythe server 20 for value movement takes out one service provider 
searched out of the IC chip (step S4). And administrative SAM21 of the server 20 for 
value movement starts movement of value information per kind (application units) of 
value information. 

[0067]FirstSAM12 for movement of the service provider 10i.e.an application 
serverwhich manages the value information to which it is made to move first is 
specifiedand the IC chip of the move origin of value information is made to 
communicate with the SAM 12 for movement (Step S5). 

[0068]The IC chip of value move origin performs SAM 12 for movementand mutual 
recognition with the key in a chip about a certain value information in the chip 
concernedand begins encryption communication (Step S6). 

[0069]Subsequentlythe value information in the moved material IC chip of value 
information is copied to the memory area in SAM12 for movement by the side of the 
application server 10 (Step S7). (namelyupload of value information) 
[0070] After the copy to the memory area in SAM 12 for movement of value 



information is completedSAMI 2 for movement of the service provider who manages 
the following moved object value information is specifiedand a moved material IC chip 
is made to communicate with the SAM12 for movement by the same procedure as 
**** Thenstep S4S5S6and S7 are repeated until it finishesthe copyi.e.uploadof all 
the value information in a moved material IC chip(Step S8). 

[0071 ]In other wordsthe number of the servers 20 for value movement which the 
moved material IC chip of value information connects is oneandso to speakthis server 
20 for value movement relays communication with the IC chip of a moved materialand 
each SAM12 for movement of a service provider. 

[0072]After the copy of each service providers SAM12 for movement completes all 
the value information in a moved material IC chip (i.e. after upload of value information 
is completed)shortlyThe communication apparatus (for examplea portable telephone 
with a reader/writer function and the portable telephone having an IC chip) 30 with 
the reader/writer function in which the movement destination IC chip of value 
information was connectedlt connects with the server 20 for value movementand 
attests with the server 20 for value movement with the user ID and the password 
which are sent from a communication apparatus (step S9). 

[0073]By certification information with the movement destination IC chip of value 
informationadministrative SAM21 of the server 20 for value movement searches a 
movement information databaseand acquires the initialization (format) information on 
this movement destination IC chip. And administrative SAM21 of the server 10 for 
value movement initializes the memory area of a movement destination IC chip based 
on this initialization information (Step S10). On the occasion of this initializationnot 
this key used at the time of use of value information but **** for value information 
movement is used. 

[0074]Subsequentlythe server 20 for value movement takes out one service provider 
from a movement information database (Step S1 1). And the server 20 for value 
movement starts movement of value informationi.e.the download to an IC chipper kind 
(application units) of value information. 

[0075]FirstSAM12 for movement of a service provideri.e.an application serverwhich 
manages the value information to which it is made to move first is specifiedand the IC 
chip of the movement destination of value information is made to communicate with 
the SAM 12 for movement (Step S12). 

[0076]And the IC chip of the movement destination of value information uses it about 
a certain value informationthe keyi.e.****in the chip set at the time of 
initializationperforms SAM 12 for movementand mutual recognitionand begins 
encryption communication (Step S13). 

[0077]Subsequentlythe value information copied namelyuploaded out of the moved 
material IC chip of value information to the memory area in SAM12 for movement is 
copied namelydownloaded in the movement destination IC chip of value information 
(Step S14). 



[0078]After a copy into the movement destination IC chip about a certain value 
information is completedSAMI 2 for movement of the service provider who manages 
the value information which serves as a moved object next is specifiedand a 
movement destination IC chip is made to communicate with the SAM 12 for movement 
by the same procedure as **** ThenStep S11S12S13and S14 are repeated until the 
copy of all the value information into a movement destination IC chip finishes (Step 
S15). 

[0079]In other wordsthe number of the servers 20 for value movement which the 
movement destination IC chip of value information connects is oneandso to speakthis 
server 20 for value movement relays communication with the IC chip of a movement 
destinationand SAM12 for movement of each service provider. 
[0080]If movement of all the value information is completedthe server 20 for value 
movement will change **** for value information movement of a value movement 
destination IC chip into this key at the time of normal use (Step S16). As a resultin 
the IC chip side of a movement destinationthe normal use of value information 
becomes possible. Since it becomes impossible with as about normal use by 
considering it as as [ **** ] about the IC chip which it left to backupan unauthorized 
use can be prevented. The value information left behind in the IC chip of a moved 
material is deleted if needed. 

[0081 ]The server 20 for value movement clears the value information for movement 
saved at the memory area in SAM21 for movement of each application server 10 
related to movement of value information (Step S17). 

[0082]The processing procedure for uploading the value information currently held at 
the moved material IC chip to SAM12 for movement of each service provider is 
shown in drawing 3 . Hereafterthe collaboration operation between each person for 
uploading value information from a moved material IC chip to SAM12 for movement is 
explainedreferring to the figure. 

[0083]Firstthe IC chip which becomes the move origin of value information is 
connected with the communication apparatus (for examplea portable telephone with 
reader/writer or a portable telephone with a built-in IC chip) 30 with a reader/writer 
functionand a communication apparatus acquires the serial number of an IC chipetc. 
[0084]Subsequentlyafter the communication apparatus with a reader/writer function 
performing user authentication between the servers 20 for value movement and 
succeeding in attestationreservation of the channel for IC chip control is required of 
this communication apparatusand a channel is secured. 

[0085]Subsequentlyso that a key required in order that the server 20 for value 
movement may access the value information in a moved material IC chip itself to 
administrative SAM21 may be changed into "****" temporarily used from "this key" 
at the time of normal use at the time of movementRequesting key 
changeadministrative SAM21 performs this key change processing. By having been 
changed into **** from this keynot SAM1 1 but SAM12 for movement can usually 



access now the value information of a moved material IC chip by the applicable 
service provider 10 side. 

[0086]Subsequentlythe server 20 for value movement requests move (upload) 
processing of value information to the service provider 10 who manages value 
information. 

[0087]In the service provider 10 sidea request of this value information moving 
processing is answeredand SAM12 for movement publishes the upload request of 
value information to a moved material IC chip. On the other handa moved material IC 
chip performs a copyi.e.uploadfor value information to SAM 12 for movement. 
[0088]Only a required service provider's part carries out repeat execution of a value 
information moving processing requesta value information upload requestand the 
upload of value information. 

[0089]The processing procedure for downloading the value information uploaded to 
SAM 12 for movement of the service provider to the IC chip of a movement 
destination is shown in drawing 4 . Hereafterthe collaboration operation between each 
person for downloading value information from SAM 12 for movement to a movement 
destination IC chip is explainedreferring to the figure. 

[0090]Firstthe IC chip which becomes the move origin of value information is 
connected with the communication apparatus (for examplea portable telephone with 
reader/writer or a portable telephone with a built-in IC chip) 30 with a reader/writer 
functionand a communication apparatus acquires the serial number of an IC chipetc. 
[0091]Subsequentlyafter the communication apparatus with a reader/writer function 
performing user authentication between the servers 20 for value movement and 
succeeding in attestationreservation of the channel for IC chip control is required of 
this communication apparatusand a channel is secured. 

[0092]If a channel is securedadministrative SAM21 of the server 20 for value 
movement will search a movement information database by the serial number of a 
movement destination IC chipand will acquire the initialization (format) information on 
this movement destination IC chip. And administrative SAM21 of the server 10 for 
value movement initializes the memory area of a movement destination IC chip based 
on this initialization information. This is notified to administrative SAM21 that 
initialization ends a movement destination IC chip. 

[0093]Subsequentlythe server 20 for value movement requests move (download) 
processing of value information to the service provider 10 who manages value 
information. 

[0094]In the service provider 10 sidea request of this value information moving 
processing is answeredand SAM12 for movement downloads the value information 
uploaded to the own memory area to the IC chip of a movement destination. On the 
other handthis is notified that download completes the IC chip of a movement 
destination. 

[0095]A value information moving processing requesta value information download 



requestand the download terminating notice of value information carry out repeat 
execution only of a required service provider's part. 

[0096]And when download of all the value information is completedthe server 20 for 
value movementKey change is requested and administrative SAM21 performs this key 
change processing so that a key required in order to access the value information in a 
movement destination IC chip itself to administrative SAM21 may be changed into 
"this key" temporarily used from "****" at the time of normal use at the time of 
movement. By having been returned to this key from ****riot SAM 12 for movement 
but usual SAM1 1 can access now the value information of a moved material IC chip 
by the applicable service provider 10 side. 

[0097]As a resultin the IC chip of a movement destinationthe normal use (for 
exampleelectronic banking by electronic moneyuse of an electronic ticketetc.) of 
value information becomes possible. Since it becomes impossible with as about 
normal use by on the other hand considering it as as [ **** ] about the IC chip side 
of the move origin which it left to backupan unauthorized use can be prevented. The 
value information left behind in the IC chip of a moved material is deleted if needed. 
[0098]In drawing 5 and drawing 5 the structure of the non-contact data 
communications between an IC cardand a card reader/writer is illustrated. 
[0099]Radio between reader/writer and an IC card is realizedfor example based on 
the principle of electromagnetic induction. In drawing 5 the structure of the radio of 
the reader/writer and the IC card based on electromagnetic induction is illustrated 
notionally. Reader/writer is provided with antenna L RW which comprised a loopcoiiand a 
magnetic field is generated by passing current I RW to this antenna L RW around it. On 
the other handioop com L c is electrically made with the IC card side around the IC card. 
At the bop con L c end by the side of an IC cardthe induced voltage by the magnetic field 
which loop antenna L c by the side of reader/writer emits arisesand it is inputted into 
the terminal of an IC card connected to the ioo P coii L c end. 
[0100]Although the degree of coupling changes according to mutual physical 
relationshipantenna L RW by the side of reader/writer and loopcoii L c by the side of an IC 
card can be realized to form one transformer as a systemand as shown in drawing 
6they can be modeled. 

[0101]At the reader/writer sidein modulating current I RW passed to antenna L RW voltage 
V Q induced by ioo P coiiL c on an IC chip can receive abnormal conditionsand the 
reader/writer can perform data transmission to an IC card using that. 
[0102]An IC card has the function (Load Switching) to fluctuate the load between the 
terminals of loopcoii L c according to the data for returning reader/writer. If the load 
between the terminals of loopcoii L c is changedin the reader/writer sidethe impedance 
between antenna terminals changesand it will become change of passing current I RW of 
antenna L RW or voltage V RW and will appear. By restoring to a part for this changethe 
reader/writer can receive the returned data of an IC card. 

[0103]Namelythe IC card can communicate by applying amplitude modulation to the 



signal which appears in the receiving circuit by the side of reader/writer by changing 
the load between own antennas according to the reply signal over the question signal 
from reader/writer. 

[0104]The internal hardware constitutions of the personal digital assistant 110 of the 
type having IC chip 100 are typically shown in drawing 7 . It is equivalent to the 
personal digital assistant 1 10 said here at information processing terminalssuch as a 
portable telephone and PDA (Personal Digital Assistant). If it is a portable telephoneit 
will be connected to VPN or a dedicated line via a radio telephone network. If it is a 
personal digital assistantit will be connected to VPN or a dedicated line via a radio 
telephone network via other portable telephones. 

[01 05] As shown in the figureIC chip 100 comprises the antenna section 101 the analog 
part 102the digital-control part 103the memory 104and the external interface 105. 
[0106]The antenna section 101 transmits and receives non-contact data between the 
reader/writers 200. The analog part 102 processes the analog signal transmitted and 
received from the antenna sections 101 such as detectiona strange recoveryand clock 
extraction. IC chip 100 can communicate by applying amplitude modulation to the 
signal which appears in the receiving circuit by the side of reader/writer by changing 
the load between own antennas according to the reply signal over the question signal 
from the reader/writer 200. 

[0107]The digital-control part 103 controls processing of transmitted and received 
data and the operation in other IC cards in generalization. The digital-control part 103 
has connected locally the memory 104 in which an address is possibleSince store 
applicationssuch as electronic money and an electronic ticketthe program code which 
the digital-control part 103 executes is loaded or the work data under execution is 
savedit can be used. 

[01 08] Various applications are stored in the memory 104 of IC chip 100. As 
applicationthe value information of electronic moneyan electronic ticketetc. can be 
mentionedfor example. 

[0109]The non-contact interface with which the external interface 105 connects the 
reader/writer 200 is a functional module for the digital-control part 103 to connect 
with personal digital assistant 110 main part with a different interface protocol. The 
data written in the memory 104 can be transmitted to the personal digital assistant 
110 main-part side via the external interface 105. 

[01 10]According to this embodimenta cable interface like UART or I 2 C is used for the 
external interface 105 which connects built-in IC chip 100 with the personal digital 
assistant 110. Howeverthe interface specification in particular of the external 
interface 105 may not be limitedmay be other cable interfacesor may be wireless 
interfacessuch as Bluetooth and IEEE. 802.1 1b. 

[01 1 1]IC chip 100 can be driven by the reception radio wave from the card reading- 
and-writing device received by antenna section 101 coursefor example. Of courseit 
may be constituted so that all may operate in part with the power supply from the 



personal digital assistant 110 side. 

[01 12]On the other handthe personal digital assistant 110 main-part side comprises 
the program control part 1 1 1the indicator 1 12and the user input part 113. 
[01 13]The program control part 1 1 1 uses RAM for workspacefor example according to 
a microprocessorRAMand the program code with which it comprised a ROM (neither 
is illustrated) and the microprocessor was stored in ROMand various processing 
services are performed. The processing to IC chip 100 is included in processing 
service besides original functions of personal digital assistant 110such as a portable 
telephone and PDA. 

[0114]The program control part 1 1 1 is external-interface 105 courseand can access 
IC card 100. 

[0115]The information storing part 114 is formed in the program control part 111. The 
information storing part 114 comprises a storage device in which writing like EEPROM 
(Electrically Erasable and Programmable ROM) is possibleexternal storagessuch as a 
hard disketc.for example. 

[0116]The indicator 112 comprises a liquid crystal display (LCD:liquid Crystal 
Display)for example. The indicator 112 can carry out the picture output of the 
processing result in the program control part 1 1 1 etc. and can notify a user of themfor 
example. 

[0117]The user input part 113 comprises a keyboardajog dialor a touch panel on 
which the display screen of the indicator 112 was overlappedand in order that a user 
may input a command and data into the personal digital assistant 1 10it is used. 
[01 18]The program control part 1 1 1 in the personal digital assistant 1 10 is driven by 
electric supply from the main power supply which is not illustrated [ battery ]. 
[01 19]By holding up the personal digital assistant 110 having IC chip 100 to the 
reader/writer (R/W) 200non-contact data communications are started between built- 
in IC chip 100 and the reader/writer 200. And access to the value information of the 
electronic ticket in IC chip 100electronic moneyetc. is permitted through collation of 
passwordssuch as PIN. 

[0120][Supplement] It has explained in detail about this inventionreferring to a 
specific embodiment above. Howeverit is obvious that a person skilled in the art can 
accomplish correction and substitution of this embodiment in the range which does 
not deviate from the gist of this invention. That isthis invention should not be 
indicated with the gestalt of illustrationand the description content of this 
specification should not be interpreted restrictively. In order to judge the gist of this 
inventionthe column of the claim indicated at the beginning should be taken into 
consideration. 
[0121] 

[Effect of the Invention]As a full account was given aboveaccording to this 
inventionthe outstanding data transfer system and data transfer method and value 
information move service device which can be made to move the value information of 



electronic moneyan electronic ticketetc. to secure onea value information move 
service methodand a storage can be provided. 

[0122]. According to this inventionthe value information of the electronic money 
currently held in the IC card or the IC chipan electronic ticketetc. can be moved to 
secure one. The outstanding data transfer system and a data transfer methoda value 
information move service devicea value information move service methodand a 
storage can be provided. 

[0123]Two or more value information which is held in the IC card or the IC chip 
according to this inventionThe outstanding data transfer system and data transfer 
method and value information move service device which can be moved to secure 
onea value information move service methodand a storage can be provided only by 
connecting with one server. 

[0124]It is not necessary to save the access key and the value information itself of 
value information for movement at the server for value movementandaccording to this 
inventionit is saved in SAM of the service provider who employs value information. 
Thereforethe responsibility range of the move entrepreneur of value information and 
each service provider who employs value information service is clearly separable. 
[0125]According to this inventionwhen two or more value information in an IC chip 
must be movedit is enough as each communication apparatus for the moved material 
IC chip of value informationand the movement destination IC chip of value information 
just to connect only with one server for value movement. Thereforethe 
communication apparatus does not need to switch communication one by one for 
every value information service hand control or automatically. For this reasontime and 
effort can decrease and a possibility that communication failure will be encountered 
can be decreased. In this caseif it thinks from the IC chip side and will be connected 
with one server for value movementhe does not need to be conscious of existence of 
SAM of each service provider who becomes a relay destination. 
[0126]According to this inventionsince the key for accessing to value information 
before movement is changed into "****" and he is trying to return to this key after 
the completion of a movevalue information can prevent a duplicate and being altered 
and used unjustly in the middle of movement. Even if it is a case where movement of 
value information goes wrongdisappearance of value information can be prevented by 
returning the key of a moved material to this key. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is a figure showing typically the composition of the network system 
which realizes secure movement of value information. 

[Drawing 2] It is the flow chart which showed the procedure for moving value 



information to secure one between the IC chips on the network system concerning 
this embodiment. 

[Drawing 3] It is a sequence diagram showing the processing procedure for uploading 
the value information currently held at the moved material IC chip to SAM12 for 
movement of each service provider. 

[Drawing 4] It is a sequence diagram showing the processing procedure for 
downloading the value information uploaded to SAM12 for movement of each service 
provider to a moved material IC chip. 

[Drawing 5] It is a figure showing notionally the structure of the radio of the 
reader/writer and the IC card based on electromagnetic induction. 
[Drawing 6] It is the figure which regarded the system which consists of reader/writer 
and an IC card as one transformerand modeled it. 

[Drawing 7] It is a figure showing typically the internal hardware constitutions of the 
personal digital assistant 110 of the type having IC chip 100. 
[Description of Notations] 
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»»7cWt»?883Sj«ft!b^fiffifil1ffa Sft £ Witt aic T 7 
? -fe Xf 5 tcisbnmt. *<r> p v>' y ? £S£K«J#T Sffi 
1i1ffa + t-tX^S'N(D«iti!f6<7)7 7 yyp- K£+« 

HijfBWItSfB^- tiX^S^e^SD5 l cCDtffai3^ft'N 

2] «atffa+t-ex^S'\£D7 7 y^p-K 
Mima-y— ex^s^6»i!)$ , £ictsaf3Si«ft±icfiffi 

fI1ffa^4f?VP-KLfc«tc«»6^6*«lcSMT« 
^?6(c«i^.l.C<!:^ ! f?^<fr^lf^ai He 
EK<0fillHi«*»»^ - trx^Bo 

3] ^»)7t(Dlffai3ii^ft±ic«iirw«l« 
a*wj$?m.oswaiffagft t«iit«tc ^ -t x 

*-trx««flmB»**»^(cf*s SuIBT'y 7p- K«- 

*)Mi-r*#©atf/xttHui3^^>p- k**«t** 
«tr*»«ai 1 icsBK^ffifiiffia^ifi+t- ex^ 

So 

fcfxSMo 

[W*3»1 5] f^U7urolffai3ii«ftSU : /Xl*^il!j5 l c 
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<!:*1#<iiS!<t-r3fS*JSl 1 ^^ISig<D«I1f^f^la^-t: 
;*iS^■,, 

- fxt swim «»»-y— ex*»?*^T* 

ifflmv— \t£X*m.'^amttlM<DTy7a- K£*« 

©ffiflfflSSro^VP-K^^SX^'y £R 
[M^Hl 7] Wfifll^'t— bfXIS£i§''\<D7 7 'y — K 

Mm w-y— s»»$fctc««re««M*±(cin 

6 lciSiE<DWiI1f $gf£»+J— trx^o 
X73>£„ 

9] flMinm«flHinrai-9— t;xttB»6^ 

is 1 6 n:|3tt<0ffifi1fa»«r9— ex75?*o 
[fS^312 0] fcIS^cDtfSBf3ti«tt&tf/Xte&I!jft 

-trx-r*«iitffi«»t>— trxfcavifa— z • ->x 

<aifSBtt-tfX^S's©1WS1«$fi<7)7'-yyp- K**« 
OTBfiMlflHI*- tf 6 ©flWMBW**^ 

«r * c t *»« i r * ib« «x *o 
[RViottfattifflH] 

[000 1] 



y =E 'J x £ <h <»: 6 icJHftMti: «t U * ^ U ^©Irc 

/ 5 -T * 6 * ^ V Wfe^OT <7 -tr X €1t 3 /cd&<D*8*S 

[0 0 0 2] MU:f¥L<teu 
to I Cij- KXt* I Cf7 7, Mtftf:, fitt-f 

[0 0 0 3] 

ftM>£1»4S5fc±T\ *AiSiiE<D#IS<t LT, BgiiE#^*> 

[0 0 0 4] 1 tftro+-vy->a K±lci3i93"n7 
L>«?S»7.h ; 7'f^£'0lB««if*<D«f»cli, ^©IBff 

[0 0 0 5] ZLOtctsb. femmkKZOWl&frZs + + 
7yi- K^yU-77 h • 13- Kftiflc*ftW4» 
j|R*»o/-cSHI*iCI C*-K^ HWt-^S^LT* 

[0006] fiJffi*«tBffiE«#« I C K • "J -<f« 

- K • 'J - -f ^ WT* ASIBXttBiBflSjyff * 
^tl^o ^LT, *A5tlSXtiiSliEj!QiilCfi)GJ*LfcJl^- 
let*. C<j7l«\ I C*-KF»glc«^Ti'tlTl^7 7 yj^ 
— > a XT)? Uffl 6^ ojm t ft Z>o Z. Z. T\ I C * - KiMS 
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-K£LTffllHT*C4:fcRrtBT«*. (ICA-K- 

(Personal Identification Number) £Rp£o ) 

[0 0 0 7] »ifi?W\ «ffl<bSI©[p|±tt)ffii^ 

&<Da-K£fr5#<#K3bS£*o CtttcttLT^ COD 

I C*-KU:<J:*ltfs 4Mk<0 

T\ 1 I C*- K^aHSOfflj^lCfUffl-rSCt^T* 

^tcibom^^-y K xy*/Mb**lfcBU&5eiiEM& 
2J.X±CD7 7 ^'J<r— >3 >=&^*rtLTi5S-. 1 *fcCD 

[0 0 0 8] ? SIC, I Cti— Ktf#- KJB'J-^/v 

flfwHIStfl. PDA (Personal Digital Assistant) IC 

[0 0 0 9] I C*-K*?JJlLfcaf 

$T5T££7'7'y^— >a> • tf- 1f$B5aS«3fi 

a V*«M03»**±Tff3C IC 
*J- K±tclBtt*tlTt"*l*9**«ISIPI*^LT J ^y«l 
[0 0 10] 4gfiS, I C£- K±lc«?^*— ¥>St^ 

[0 0 1 1 ] i:ZZT\ WMHB«:*&ML/c I Cf 77 



[001 2] smvaMowisgmii** — mc» « 

icfitt*3i«l«»^75/vi»»4^tcj:*fiiiHii«ajfl)>H 
*U» ■JM(ttKt9Tttlffi!fil*T*«. 

[001 3] m^^-^m? 

tiltSSS K <7 -fe X f 5 tcZb iCj&sT^a-^-f-© P v>' f * * 
Jffcfc T\ fiHi11M8«-*Bir 3 E « TOtetf*l\> 
Sfc. fiBHi1WH©»«i*IHtft3CtlcJ:ys W55**t 

^c^*«I1f$B^: ; ^-(Da^c•^t^T^Daffi6^Me<)^^:5l^■r 
/ u &\z £-?tiz. y—eT.ommotmf&zi 7 1 -t 

[0014] ««l»«o^-trx • yn/^yti, j1 

(Secure Application Module) ^ffll^Tx WltiNKi 

y *»©fififiii«**»»*-tt*icJ4, -b*w 

■p»tiflKI1lHi*fiWr*ieW#**^ SAMCJ:5 
&t>o*:g|BJLai*H»K co9!FIMi-0--/tti:J:tJttEl 

[0 0 15] CtiKWL fll^fiffi3t5*ft<D«aSM#^ 
SSWJ+J— fcfX • 7P/W^lcj:oT^T3i:^573>tt^ 

[0 0 16] L6^L^^6, a— yttJKWisSfeoaHl* 

i cji-k*i »y«^ty»ic)i*ic#i\ i 
«t>n.". i c^«yy^5iffifiits?B«:SE^mry 

<Di±m*- WNHc * tf«£T 5 rT B^ttft^S < 

[0 0 17] 
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[0 0 1 8] *«U30!>jefc*lttW\ IC*-K*IC 

ntc 9- * x x urns?- * nmwz. w<mw 

If XSS&tHMIIf tf X/5;£, ffitf 
[0 0 19] IC^-F^IC 

^•yyrtic«j#*nTt^«i»a3fiffiffitfffl«r. ittm© 
maw www— if x^g&uwatsssfcsj+t- if x* 

[0 0 2 0] 

[|*SI£«>*TSfc&<^ISR^fln ±13 

fcfiittlWiOWiaiWlflHI*- if x«»'\©7' v 7u- 
[00 2 1 ] fSU rvx^Aj tti. 

[0022] $/c. 2 ©wai*, «am$B^ 

mm&tefr s «its$B s it t mini « k t 7 * -t x t % 

W5^x77L *#*1iT* C x- 
[00 2 3] *»IE©Sg 1 XtiSH 2 flDffillElcW*^-* 

a:if<oif«ias»»fwc«»*nTt'»*«iflWE*, wa 



[0024] C C T\ Miaf«I1«B»»tf- If XSS 

[0 0 2 5] *fc, ineMflmiHW--ifxttK& 
ffiriBfflHUff fcfXSBfr 6f£Mftlc«IBfBiSSEf*± 

EIWif*lc»*tiTt'>Sffifit11HI*«ltO**tr*C 

[0026] src &wi7i(Dmmmmi*±im&(»m 

-tz X f % tctoOm £ *<D a v> <y ? £££ ICSJfT 3«g 
IfSB-t-ti'X^SAi^iia^^li^lcli, tuiBffiffi1tffl& 
ft-?- kfX&Kti, »H)7ctDm«iBBS«#^6<7)fiBifilt* 
SBOT'-y^P- KMt>'lc^ifi$ l c(OW$8lB^<*'\<7)^>7 

xi?sicigiii5-rn«"j: < , ^Wi^ntmwiTmmam^— 

^S)7C©1f«iBS«f*fflyfr5%ASt, 

[0027] rni3fiffiffl«ai»«iit-fcfxs«tt» watt 

#8=&ffi{i1f $8+^- tfX^B^S > P - FT £ Su ic^ 
»jt«)i»«l3l««(*0«!]«Mb«ra*fTa J: 3 It LTtcfc 

[0 0 2 8] Sfc, w]iafflffl1f«»»it-lfX»»tt, 
[0 0 2 9] *^©*3(0ffllJE{i^ IffWEfllW 

f*m-p<ofiiiHii««©»»*-^- e^r 

- tx^sxiiwatssB^ift-y— if x^t» ^> t. © 

»t£ <0« *IB««f* A^fiffiffltSIB i f* t Watt $8 [z T V 

m x -r ^ /c«)©a t * <d p s> y <7 tc«^-r ««a 

lflB-9-- tf XSS«^<0«fi1f SBcOT'y yp- H'%(f*KT 

sfswwfyyt. soiBffifiiifffi-y— tfxss^s 
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*fiffi«HHB»»-9— If ZfcBXttflfflMIt WiHBrtf- ex 

[003 01 *&B;3a5$g 3 (DmmiZ&Zffiffl* 
-tfXKBXttM1tffl»«rtf-«f*7j»fc*nfcrs I 

cry?* ^(DimiiBAnwtcfimftiT^sminm 

/ \- K r> i T 7 • * i> n. -Jb S A M & EommUfflyr- If 

* <tffi1Iti!$8 it T V -b £ fc46lc^M^ <t □ S J 
•v'7*fH±Z>Z.tts.<.. MofiBifil1f«0«l«^3!tfi[*R& 

[003 1 ] CC?, *»^©S3<0ffliJElC»«Hfii1f 
«H£»-9— IfXSWi* »»7Cfl>1f«IBI»«#±«)fllHi 

fgcDT'-v^'P— K 3 &fr5«*:5tcLT I tJ:t\ 

rc£KJ:y/to*7 7 y:/fcLT«l x *z:£#T*, fffi 
«1Wlfl35ll5fe*l«<'C 

[0032] meoHiflra-9— tfxswemb 

Jfctc1t«JBIWBi*±tclBffi1Wll* □ - K Lfcfelc 

[0 0 3 3] $fc, 9»7cOlt«tBi>W#±^«|kO«iS 
«1«MMH«S*iflo«WMIHI S ft <h«ttiNB (= T 7 * 

tffclA, ZOtc&b. &K1N*Vs JMI»»tfJBC*RriB 
tt*»'>*** cttfT?5. &l&rc<Z>1t*lfBmK*fl!l 



[0 0 3 4] *HB^<DM3 ^ffiiJSlC^^mitS^ifitf 

- if x»«xtt«nHiit«»»^— tx^^tt, mini $b 

[0 0 3 5] £/c. *%HO%3<8flini(Ctt3ffllhl1ff$H 
[0 0 3 6] $fcs *aWOJB4©fll!BIH:» tS$Bf3iii« 

itiB7?<ofiiHiita©»tt*-9-- if xr *fiwiita»»-9- 

j£;2rft7cP>tf a— 5? • V7 hr>x7»*-3>lf h-£pI 

se»scT**a«icttift L/ctBti«ftT»oT, Sussu y 

P 5> * *«i1f $B+t- If xaB^WfiBi 

iittSBtDT^y^P- K^tfUHrSX^-yytx tuI3«I 

[0037] *&w(D'm4<Dmmiz%%immmt. m 

t2-^'->Xf^LT> ZlVtfa-* • V7 
iT'fcnvtfiL— ? RlSl^^iCT^-r S MKtT** S. 
i!<DJ:?&«t*li. mi*', DVD (Digital Versatil 
e Disc) ^CD (Compact Disc) FD (Floppy Dis 
k) x MO (Magneto-Optical disc) 12. E<MtffoU&T* 

7h7-7i«, *«w)[S5ij*ini*>fti/o *t*©eas 

[0 0 3 8] *8H®)B4(Offl1ElCffi3IB1inttli. 3 
Vfi-^ • ->X^/*±Tm^©=l>lf a-^ • V7 h 
^i7'W«lt6€-5l^r^fi:<!!6^ =l>lf i— $» • V7 h 
i T 7 tl3«JI»#i©«iaLhX««<l6±©tt««IBI«* 

K«*E«i<**^LTmS«)3>lf a-* • V7 h-7 
xT'^^Vtfa-^ • ->XxAlC-f >X I — llTZCt 

lfXK«XttfflifiltWli#ili-9— fcfX73atra*©f*ffl» 

[0039] *»iw>* stcffi© a #st^y^«v 

[0 0 4 0] 
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[0 04 1] I CA-K-¥> I c^vTrttelR 

+t- / %\t. rowait$B-t- tfX©7D / w y<t ti— 

[0 0 4 2] G3 1 ICli. {ffilfilfSBO-fe+iiT 7 ^!^* 

[0 0 4 3] iBHaiC^fcfe^tC. VPN (Virtual Priv 
ate Network) ££l^i»ffllS&<!:CD* 1 J> h?-' >±K 

(APS) 10A, 10B-t, IC*-K^ICf7 

[0044] S7yjy->3>-+r-/^ (APS) 1 
OA, 1 OB-. ffiO-'lts M'Jo.— f£Bjffl+J--M 2 0 

li. *la^ft»*>/\°1±£&o/\- K^iT 7 • =e'Jjl- 
;l/SAM (Secure App I i cat ion Module) %MXT^ 

[0045] *mmwm-eit. i w n.-tmmv-/ k 2 

Oit. &l C^-yypv)£0tSf8«-ir4 : -iL7 7 lc < gSr^/c46 
ICgSffl S A M 2 1 £ffi*.TV£o 'SSffl S A M 2 1 

C^-y7 p 0 , gii^3 t , £fc, "giifflSAM2 
[0 0 4 6] $fc, S77"W->ay^-MlOA 

■ it. «iiwB*a BfiBiT ^istcfli I/* * *a7ib^-r 

3>lJgSAM1 1 <t. /{Ua-f£l&fll+t-M2 0©<B3 
ISAM21 AWT-r^SSlCcfcoT^ib^lciJl^-r^ 
&®JfflSAM1 2£«I*.Tl^3o 
[0 0 4 7] I^SAMI Hi. S+t-fcTX • yn/w 
#TZf>J / 7—'>3> • "tf-Ml 0±T{lS'JlC < §ii*tlv 
tffl!1f«©-9— tfX^3o 335iSAM1 Hi. Witt 

SSAM1 



[0048] ii^SAMI 1 t&W)mSAM-\ 2lt. % 

Tli& <M'Ji <SfgiJ©»mi!: S A 
MUSE'S LTt^TtcfclA, 

[0 0 4 9] ST 7 :/'^— >a > • +f— M'1 O^/iUi 

-->a> (WS) */<-Vtil/ • avtfa— £ (PC) 

tA^T-^So X^AW-flJli. JKI BM*±(DP 

C / A T 58m3ctt*©&«M«T£*o 
[0 0 5 0] S/c. IC*j-Ri. ICf'yytLT* 
w11Si«-¥>PDA (Personal Digital Assistant) tiE 
£Dfll*4a5*3 0 AlC|*iaLTffl^6tlTt^*\ ££1^ 
li. y-#/^*tt*©JJI?IS«S*3 0BlC#tt£«l (X 

■¥> I C ft — Ki#©S*©rc»[C, I 7Xtt I C 

ti. asagx ii*r naroiiiifiii*:*^ ltvpn K&m l 
T. /WaHMW- /<2 0 ic«iW«©»i))*«c«lt- 
^5,, *HSS^Tli. I C^-yyic«J#*4a/i:«[»cDfffi 
flHt«*»»-r«*&T*-3T , fc, ««fiS*3 0ti. - 
ffip/rOD/^J M'2 0(cSHtr«f£(tTJ:i\ 

[00 5 1 ] JVJ D.-MbmV—H2 Olt. ffflllO 
^■IciU HffiSAM2 1*ffiiLT, I Cf 77 
S3HlK«aT*JWT*. 

[0 0 5 2] **SBBttTHts /t'Ji-iM(ll1t-/t2 
0 li. gSffl SAM21 Mitt n<D&K}<DTz 

&>\Z&V-\£7. • 7P/WWifflSAM1 2ilC 

w*fi5. $7c. i c^yyfflKoy-y/^-r^wte* 

J#Ofil«^3 OB^fl C*v7l*3Ma©«««i*3 0 
Ali, SAMt I C^yyiHJTflHWtiifll^ffton* 
I C*vZf£/VJ n.-&W)V-/<\2 0 tomm^'n 

[0 0 5 3] /^Ji-»IWt-/(2 0t*»tlSA 
Ml 2i:tDP^Iti, /^Ji-»»ffl^-M2 0#&3f£i& 

fflSAMi 2 ^»Jffl)■r^^Sl?g^c•^l^T J ^-n^ f n^llS'J^cis 

iSfflSAMI 2i;C0P^Hix PK I (Public Key Infrast 
ructure : liBSSIBg^Sffi) SL< li^jiaic J:4BS» 
flstfRlirP**. */cs /^j2-^l)ffl1f-A'2 0<»:jS 
M(D&mm S A M 1 2 <b<DRmcli, V P NXli*ffl«IT- 

[0 0 5 4] 131 \ZuiLtc*-v • ->X^AIC33 
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t&% i c^-yy commit. m-v>/vjn.-®W)mv 
[0055] jvj D.-&&)mv— j < i2 0(D<gmms am 

2 1 It. WIlf&^fciiJ-r^BuK. «§1*$B©8l£;i?g 
ffiffiBfoD r^gj fr^l&WXDtctiXO— r«»j ic 

©fiffittM«<0»»#*7Lftl/>55W:» ^©1 C^'y^ 

[0 0 5 6] »id*^7L/c<h#lcti, <§iffflSAM2 
tc«fcy, «Hl«»BiiitH^tfRrfl&£ft*. 

£fc3©T\ *iEfflfll*l«<*C£tfT¥*. 
[0 0 5 7] /fUa-fHMlV- M2 0tt. I Cf'^ 

©^BfflSAMI 2€-ffl^T»»«-iT-5o £roBS, 
ex • T/P/M'tf (APS) ffliJ©»»fflSAM1 2T 
It. WBfcM'J n.-»fdffl-9--/\" 2 Ofr<Z><DT ?HzX#J 

[0 0 5 8] +>— tfX • ^'P/WycDT'^'U'ir— >a> 

r?.ft:460)ai:v ^-©□v'-y^^ii^SAM 1 1 icttM 
?Z tt tic, «M«»»ffl©«**©P5>v**» 

IMS AM 1 2lC*S*rtLTl^£° £fc, &KjB$lC x I C 

(D&Wim S A M 1 2 B§ftlc<£??7}rtt£o 
[0 0 5 9] 19Hi1t«09Hl%^:«:« I C^'y^ffliJT' 

+>•- ex • yp/w^-r^to-67 , yj'!r— >a> • +*-- 

A1 005&IMSAM1 2 3b x 6Mi1»«*^r>VP-K 
[0 060] VSffl S A M 2 1 #IE LI/4MC 

[0 06 1 ] * LT> I Cf 7 ^©T^TtfMMITIISH 

am 1 2rtic— ««jE«»*tiT^/fcfliHinHi*i>jiiw 

[0 0 6 2] H2lcM\ *S|jBB«WC«**v ^ 
^iS*-l±5/c<«>©5QS#llI^:7P-^-V- hCfBSTS 



$0 1 0 fD&SJS S A M 1 2 BBTOttlittftBf^lC.fe »J 
[0 0 6 3] fBHi1ff«B(0»ll7c^«% I C^y^ 

its 'j ?mm*ft-ommmw. mwj-* 
/^^^^(ommwrnk. mt i cfy7>3ifl«w 
mat) 3 o tmmrzo arsuu ms\7t<n \ c=rv7 

It. d©iifl^S3 0«Eb7/t'J iL-^iSffl+t-A'2 o 
<fc»»JLTs iHfgS3 0fr6>M<=>*l.£J.-+f I D. /< 

7 7*S1) . 

[0 0 6 4] M'JiL-fMWBtf- A' 2 01*. manm® 
&»7cl Cf'^^iU, C^-y Arties 

-Wttffl*- A' 2 OfltfWaiCJBJKLfc I C*V70>~> 

WW^-^l/tWTOlClMWIHlT*-' S^-XpglcfflSL 
Tfc?. «IfS$K<D&»J7G I C*y7©5/ 1/7^1/ • ±> 
J <-^^f i. d £ IC £ V . Z tott&T-yfoltftm LTv 

465 uf77S2) . just? 

V— tfX* ^P/^^T^-5S AM^fflifrST'yU 
[0 0 6 5] ^L^T\ /t'j2-»«llt-/?2 0OB 

ffl s a m 2 1 , ismmno)&W}7L \ c*>y yp^omm 

(C<feU, ti'X • -?©jims AM 1 

1 « I C^-y7 p l*l©Wiltf$filC7 7 '>-trXT*^<^5^ 
t>VlC. ^ififflSAMI 2^ I C^-y^tDWItS^ 

[0 0 6 6] &UT\ /tUi-^Uffl^-zOOlt I 
c^ y^p«g6^i»pgirtL/fy— ex • 70AV^1^ 

-M*2 0 ©<gSffl S A M 2 Hi, {ffifltf ffioaamffi 

[0 0 6 7] js«jic^®j^-a-5Mitif?fi ; & i gs-r 

ex • ■7n/W??r J :t,l57 7 7<J J r-: : S3> • *t 
0C0^»)fflSAM1 2^^LT. «Stf$BCD^ 
ifi7c(DI Cf7 7°^©^l)iSAM1 2£.m%-£*±Z> 
Ut77S5) . 

[0 0 6 8] /\*'Ji-«lSffl I C^-yyti. ^IS^-y 
1SAM1 2 t*BSI8BE*t7t\ BB^fbaiffi«ttd6% 
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U777S6) o 

[0 0 6 9] Wi1t$Bro»K7n I C^y^ftco 

fiffifitWftfifcv T 7 ^ U > a > • 1 OffiijcO&ftS 

SAM1 2(*KD^ : EU • x'JTHczib?- Cr*t)"5, iffi 
fittt$BC07 7 -y7P- K) T* Ur7yS7) „ 

[0070] mmm nn&mm s a m 1 2rt<o**y • 

x'J7"\0)i]tf-3b^7"r?.<h, 5fccof£»3<tSifflI1*?B 
^fit^^-K'X • T'PMWco&ElfflS AM 1 2£ 
^LT. ±&<tlR]8i<7>3MBtcJ:y, &©)7eI C^-y^ 
**<D®W)mS AM 1 2 iiiHt* -t^^o 3I#«S*, 

'yyn-Kfl^ib«$T% S5, S6, 

[0071] »i>&*.ntf, mmwntesift icf7 
■j&mmrzjvj z-itmmv— m'2 on 1 mmr-to 

y, Z(D/K>J D.-&fhmV--/<i2 0te, »l!)7cWIC^ 
[0 0 7 2] SHitc I C^-y^rttD-r^T^mitSlfi^ 

^n^nco^-trx • -fa/ww&thms AM 1 2^ 

F^TLfA «i1f «<D#»$fc I Cf77 

2 0<£S#5LT, «fU£«frS2!Stl*3.— tf 'I D, M° 
X7- K?/^'j2-WBfflt-A2 OfcBSET* (Xf 
77S9) , 

[0 0 7 3] A'Ji-^tffl^U OCOgSfflS AM 
2 1 mWim<0»Ws9z I C^'y^COfSliEtSSBKJ: 

^•y7©fflMMb(7*-^v f01t«*fi*. *LT, A' 
ij n. -&W)mV-l \ 1 0 (D'gWm S A M 2 Hi, C COW 

juHbitsncs-s*, mtoz i cfv^tu -i'j? 

&mWHt?Z Uf7 7S1 0) . C©«IIlB^b»cPRL 

[0 0 7 4] /\' l Ja-«!(lffi H t-/^2 0[j:, & 

Bltt^gx-^^-X^e+^-ti'T. • 7p/H^ 1 -on 
►JtfJ-r Ur7 7S1 1) . LT- 
-M2 01*, fflHl1ta<0Wi*ffi(7 , ^'J<r— >a ># 

[0075] sr» «ttic^ifi*-t+^«it»$B : & < gs-r 

-MC0&IOTS AM 1 2^^LT. «§ttffl<D»»?fc 

co 1 c^vzftto&mms am 1 2 tinis--!** u 

^•y^S 1 2) o 
[0 0 7 6] LT, fiflHlflHRQ&l&ftO I Cf77B 



F*gC0Srr&*3-5«Si£teffi LT, »i)lSAM1 2 <t*§ 
EBBE*fft\ Bg^bii<f£#iA63 Ut7 7*S1 

3) o 

[0 0 7 7] %l^Z\ &SjfflSAM1 2F'3CO* : E l J • X 
y TncflEfiStf Sfico&iJm; I C^-y^F«3/)^6ntf--r«:to 
■SZ-y^P- K*ftfc«»1HI*. fiHHIfll«<0»»^ I 

1 4) „ 

[0 0 7 8] feSffififlff $RKOUTC0f£»$t I Cf77 
ft^fSmTZ-y-ldX • ^P/«-f ^CO^KfflS AM 1 2 

£tt£LT\ ±atm««)#«icj:y» ^ub^i c^y 
■7&*o>&mms am 1 2 «h;i{t3--e-& 0 & 

7T77S 11, S 1 2, S 1 3, SU-'S 1 4 
*mV&? (X777S 1 5) „ 
[0 0 7 9] *^8kX.ft& «I1f $BC0^i(j$t I C^-y 

7#Stttr«/ty /\"2 oi* 1 emT'S 

y, ccoMy a-f^iSffl-y-M^ o«\ fjstfcco i 

7 7"i^-b'X • 7 , P/Wiffl»liSAM 1 2<tC0 

[0080] -r^Tcoffi<its$scoif?ifi^7-r^i, m 

-5 U?7 7S1 6) . EflHSJR, »»J$fc<OI Cf77 

-?7'-yyffllc^LTfct^c I C^-yy»cB8LT««St<7) 
£ £ <t "T 5 C <t It * y ji^lSffl *^«6<D S $ t a ^. CO 

[008 1] /^y iL-^®)ffl-y--/^2 oii, (i 

ffim«C0^1!]lcK#L/c^+x^+lC07'r i y'7--->a V • 
+t-M'1 OCOi^itlfflS AM2 1 rtCO^^EU • X'JT'lCffi 
^LTfc^/c^iftfflWltSSB^^UT'-r^ Ur7 7S 
1 7) „ 

[0 0 8 2] E3ltli, &W)7t I C^'y7lC«J#*tlT 
l^ffifI1f$B ; &<@'«7C0-y--t:'X • T'P/K ^'CO^ififfiS 
A M 1 2lzTv7n- ^r^tcttfDWM^m^^mLT 

Cf77 , fr6»S)fflSAM1 2ltyyyp- K-T^fc46 
coS#P^cotStbWKf^lcot^TI«P^-r^o 
[0 0 8 3] $r* «M1WB©»Ml7E£&* I C*y7 

tts y-y/-5-r*«MB*i#oa«*ii (mtfy-^ 

VBW) 3 OiiS^LT, igfi^at* I C^-yycO->y 

[0084] y -*r/5-r *«*6***oaflis 

Hli, /<;y a-f$»)ffl-y-A'2 0 iC0P^T-3.-+f|gSE«- 



(10) 
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[0 0 8 5] /W2-»illt-/«0tt, V 

ISSAM21 iCttLT&Wjjz I Cf 7 ^(DfiffiffiWSH 

y» »ar*-9— tfx • ^pmi'sm ofimiii^s a 

Ml 1T(4fc<»IW8SAM1 2#»»tgI Cf'^ffl 
«I1f «H lc T 7 <7 -tr X T '* £ «fc 3 IE & 2> . 
[0 0 8 6] &1/>T\ M'J i-»tffl+*-^2 01*. fffi 

fiBHinwi©w» (7yro-K) «wa*tsowr*. 

[0 0 8 7] V- tfx • 7n/\V^l 0flUT'ti> 
ffl1t«M&^©fla»tCISS*LT, SSfflSAMI 2 

ffifilf W£®Wlf% S A M 1 2lc=]tf--r%^"57 7 'y^P 
[0088] «§tit$g*£I2)S&lHS*I. «I1t«7* * 7P 

[0089] ^/tv isi4ictis ^-ex-yn/^^w 

&1Wg£> I C^y7U:£'r7VP- KT3fc4&tf)i&S¥$t 
t^LTU5„ J-XT. IWllgl^BgL'Sr^e, «fc1t$B 
*fWliSAM1 2fr6&lb$fcl C^-y7le^^>P- 

[0 0 9 0] *r» fiBHI1tao»«l7Et** I C^-y7 

[0 0 9 2] iMfSiW*«*ft*£:* :i-»lf]«tf 
-A2 0<D<gmmS AM 2 1 {*. &Wl9c\ C^-yZfCD-s 

am 2 1 (*. z.o>vmtmmz*-3f** \c*y 
it. mmttmTtz t cti&sws s a m 2 1 icssa 

[0 0 9 3] /lUi-^Slffl^- /*2 Of** ffi 



flHi1f*<0*» Wva-K) iasS-teHT^o 

[0 0 9 4] -t-tfT. • 7*P/\V^1 OtJTlix c<Dl 
«1t«»»»a©tt«WEJ5*UTs «ft/BSAM1 2 
A\ • xU7 7 lt7'-y7 p P- K*nTl s ^iffi 

fS1t$B£&»j$fc© I C^-yT'lc^VP- KTSo £*i 
KttLT. SSjftcT)! C^-v^i. ^'^VP-K3b^7 

[0 0 9 5] MltffB^KSQSflc^ fBKilta^VP 
- HSitf, Sfctft«:fiflHB1t«eD$r*>Q- K*7ii»tt» 

[0 0 9 6] ^LT, -T^TCDffifilffBro^^VP- K 
AM 2 1 iCfctLT&ifcft I C^-y7rt<DfffiiItf?figi*lC 

5. a^M^flcJlL, IliSAM2 H4CO«»K«i 

^■y— • zrn/wtn owmtftmms am 1 2? 

< ii^ S A M 1 1 jfiHWftTC I Cf 7 7(D«ItSIBlC 
[0 0 9 7] CW^H. i&KtfcCQI CfvTt* «I 

ttfficDii^ffiffl (mar, ir?^*-^^?;*-;^ 

[0 0 9 8] EJ5St>'l215lCti, I C£— K£*J— K • 

[0 0 9 9] 'J— V/^JZt. I C*-KBa<7)««giifS 

©Mlia«<Ottli**«tfttt(E:Ba»LT^*o U—5*V 
yu-r-p-r ;UT-«Sfi)6T3rn/c7'>^^-LRw : & 

fltA, CC07 7 >7 1 ^-LrwICS£311 I RW^'TCl^T^cDil 
I Cft-K<DJ3fflKJU-:/0^/l/LctfmsS:T*-ft 

[01 00] v-v/^^zmnTyTi-Lmt- 1 

[010 1] U-4f/7-f*ffllW4» T'V^^Lrw^SS 



(11) 
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[0 10 2] £fc. I C*j-Kte, U--Sf/^'T'S"NjS 
ZtctbV) T-f KJ£ UT/l'-T'' =l -f/l/ L C ©4S?-H 
©i[W*«»*-&*«ttB (Load Switching) *J$o„ ;U 

5 -f fiT 7 Vt 1 -t-mrmaM > tr- *f V*<MMb L 
T> T^T^LRwW&jSmjffi I RW^l£VRwWSlb<h& 

[0103] r§M> ic^-Ki*. y-$r/^-r* 

frSroKPp^i#KttT&J^l^lcjEUTg : &tf>7'>5 L 

[0 1 04] H7lCH\ Kf77l0 0^1 

Lfc*-<7©JJMM1*1 1 0CDF»3gG/\- K^i7«^ 
WSCttfciSLTl/'*. ooTb5«w!S*1 1 Old*. 
SI^IStS^PDA (Personal Digital Assistant) & 

[o 1 o 5] i5iiaic^-r<tdic, i cf77i o oti, 

T'VT^gPI 0 1 <t, TVfP'T'gPI 02t, x-fv-'*;!/ 

$wan o 3 <tv ^tu 104L fl-SiH'V'S'-xi- 

X 1 0 5 iTffigJtlTt^o 
[0 10 6] 7>rtS51 0 1li> V-V/^^ 1 2 0 
0 tCMT^SH^-^CiSSflrafjS. Ti-aySfc 1 

0 21*. «3L XfMI« *nv*ttUi*£» T'V'x^gP 

1 o 1 fr6a6Sfi4-ti*7 , ^-p^(i*<otea*?Ta. i 

Cf-^IOOIt y-ST/^f^OOfrScDWHHI 

[0 10 7] ^*iWM»»l 0 3ti, g^im?-* 
©iQJl^OTffe I Cft- KrtOTiM1^#cf§&<KCP> r-P 
-;U"T^o 5V v^/WS'JftPSP 1 0 3ti, 7" KUXpTbES: 

y^E'j i o 4^a-t)McmmLza i J. n^v*-- ¥> 

* >>*/WM»ffii o 3*«it?Tr*rn^^ • =i- K* 

p- KLfc»j» mj+<orm7 : -**w&-tztctbicm 

[0 10 8] I Cf77l OOffl^tiJI 0 4KI*. J 
%77') 3 >tfffiiJtlTt^o Tyj^r 



[0 1 0 9] ^g|5'T>->-7i-7.1 0 51*. "J-*/ 

7^^200^ £&33N$ttK y*-7x-xt itmm 
?2><f>&— 7i-7 • T'oha/neiy, xV v">;l/ 
*J^SP1 0 3 fjm mimm 1 1 0*tt<t£^r£fcA6<D$[i 
fg : Ev'iL-;UT-S^o ^^Ul 0 4(CS$32 s Sn/c7 : '- 

*i i o*t*ffliucte&-r£ 

[0 110] *HSgB«lTli, 8tfl»ilS£l 10trtll 

c*»zf\ o o£s*rr2>$i.gp-f y^-xi-xi 05 

let*. U A R Hf> I 

ztemrZo fsu ^gp-rv-?-7x-xi osc-rv 

33&lHiB I uetooth-^l 
EEE. 8 0 2. 1 1 b%i'<DfiJg'r>9-7i-XT' 

[0111] i cf'>7i ooi*. mzis. 

1 0 1 «fiTS«*n**- Ktt*»*S«#S©SfI 

1 Offlij3b^6(Dtt$gm73lcJ:-pT> — SPXtt^SPaWFT 

[0 112] -73. 8tw4ffi*1 1 0*ttffl«\ 7P?5 
/**JW»1 1 1 1 2<b. a— »fA*»i 1 

[0 113] 7*D^5i»l!l«B1 1 WLtfT-C* 
□ 7Pt'^i, RAMi, ROMT-fllJ5£*ft (l>fn 
tE^L-Sl^) x ^•Y^pyp-tr-yy-ti, ROMlctefcrt 
7*f*irc7°P<?'5A • ZI-Rc&oT, RAM^fflf^t 

tfTUcli, SI»lllS«^PPDA«:i:©«««B*1 1 0* 

3R£><ttS4)ffei;: s i 771 oo &$&nt>^£ 
[0114] ypy^/x*"jffli8iJi 1 1 1*, a-spo*- 

7i-71 0 5H£T\ I C^j- K1 0 0\ZTt*.7.? 

[0115] $t -fuv^mmw^ 1 1 (el*, tsai 

*S*rtSP1 1 4 3b^t6+iTl^o tS?B«$«gP1 1 4lt. 
WXlgE E P ROM (Electrically Erasable and Prog 
rammable ROM) (DXottlZ&frallfelS:*^' J ^fi-¥>, 

[0 116] «SS51 1 2ti, «!JAIiM^T'f77 
b-< (LCD : liquid Crystal Display) T^fiES'tl 

«o sawi 1 2te, ffjAw, -fuy^bwm&i 1 1 

[0 1 17] a-+fA77gP1 1 3ti. *-#-K^3 
1 Olczl^VK-^-^ATI-f &fc<*ttteE£tl3o 



(12) 



^2003-1 4 1 429 



[0 118] m&tmmi 1 0ft(DZfn75'h.*m%li1 1 
1 It. /W^U&£'0;SL&^i^>i£fr6<Z>S&mu:<fcy 

[0 119] I 0 0*rtKLfcSWM**1 1 

O^'J-^/^-r* (R/W) 2 0 OiCfr-g-?Z.tiZ£ 
■oT. I C^-yX"1 OOi'J-^/7-f^ 2 0 oiig 
T*N£«x— r&mftMte-Zft.%„ LT> PI 

[0 12 0] [iiM] J-X±. ^CDHfig^fil=&#?,8L^ 

t^^mmT^m^m^Lr^ tc(D-?& y, 

[0121] 

it w&wiv- exjjm. &mzimmt**mi&? % z t 

[0 1 2 2] SEfc, *^lCctrili\ I C*J- K^S> I C 
^-y^fclc^^ftTl^^f^-^m^^y h& 

[0 1 2 3] £/c. *^(Ccfcn«\ I C f}— Ft* I C 

WlfllWMfr*- fcfx«Kfttf«HiflMIIMIr9— t x£ 
[0 12 4] *«WtcJ:nW» »»ffl©fiBKi1f?8<7>7'^ 

^ijjp^#<t. ex*»BT**-9-- ex 

So 

[0 12 5] *«WlC«tfttf» I C*-y7l*g©* 



/^icSMrtiuTs 

ex • 7pMV?'©S AM©^££ii!«TS!&S# i % 
[0 1 2 6] $fc. *5gB^(cj:txl*\ ^B)ful-WI1tSB 

SoTt, &Ifi^©gf£*&lcMTe:<!:U:<fcy. Mitt 

[ii]ffi©fa*^siB^] 

[si] «iitsg©-tr+3.7 7 ^i»^ii^'r?>^'y h r7 
[El 2] **SSmitS(c«5^.-y h?-* • s/x?ik±ic 

[03] »»7ci c^vricfiy#*tiTi' k *«iita* 

ffl^©-9— ex • ^P/W^CD^UlfflSAM 1 2»C7 r v 

[04] fS^OD+J— • ya/W^SlfflS AM 1 
2lCT-yZfa- KffnTL^*fiBifil1«B*»»7C I Cf 7 
7 IC -j7 V □ - FT&tc&CD&m^mZ &7jkLtz~>-* 
>X0T3d£o 

[E5] wmmmicm'3<v— ^<f*t i c*-k 
[06] y-$f/-7-r*£ i ca-KfrS&s&fcifH 

© h^VXtLTJJE^T^^HbL/cET^S. 
[07] I Cfy^l 0 0£rtMLfc*^7©«w4iS* 
1 1 0WF»gg|5/\- K*x7 , «DS**SCttlc;5*LfcEI?« 
5. 

[ft^OSiHE] 

1 0 - 7-7Wr-: l/a> W-t:X • 7p/\V 

40 

1 1 •• ii^S AM 

1 2-SllffiSAM 

2 i-^ififflt*"-/^ 
2 1 -flfflSAM 

1 0 0- I Q^-uZf 

1 o 1 -t'Vt^sb 

1 0 2--7 7 ^-P^g|5 

1 0 3-fr^/HJi8l! 

1 0 4 " ^'J 

1 0 5-ft&'C>*—7x.— X 
1 1 

1 1 2-S^fiP 

1 1 3-=L— *f\1M 
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1 1 4-tlNBtttta: 



2 o o y/^f* 





lCT^? | 




Bft-K 





[01 ] 




SAM 

11E 




APS 

106 




VMM 

SAM 

1ZE 


V 



aps 

100 



AP8 

IOC 



IS" 

8AM 
11C 



a* 

8AM 




mm 

SAM 


IIP 




1ZD 



1BF 

8AM 

12S 



c 



DC 



3 



[03] 



} 



MttSAMlZ 
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[El2] 



C 



START 



T 



SI 



i 



S3 



S4 



ic^^sAMiim^^ 



S5 



IC^^SAM^tBSBIiEU 



S6 



S7 




(MflMia>7^p-K) 



5 



S9 



SIO 



*i-3*ya-r 



S11 



S12 



IC^/:?fcSAM)W5**BH>T ^ S13 

«5:iStIUIiWb»«£M*i r w v 



SAMAOflttflMg* — S14 




S15 



S16 



— _ 



c 



END 
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C 



D<2 



[El4] 



5 



Pjtg» 



} 



[1215] 




T 
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T>*-HH01 



20G 



102 



**« 
Mil 



L 



112 



113 



103 



IOC 



104 



111 



114 



